e7786f659dd3c2de0aab75e0c29a8044_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e7786f659dd3c2de0aab75e0c29a8044_JaffaCakes118
Size

4KB
MD5

e7786f659dd3c2de0aab75e0c29a8044
SHA1

7f0c9860764d6f4948a5a9d17853536d5a2f7872
SHA256

326ecd57d3c672b06e7649767bf5dc267809e34f70e58924ee3cd11aeea37b8e
SHA512

99e38cbe853bec2c9cc23d1cf181cb8856e9bc38fc61899f00306d30302bbc381aabc1e52285032c9b42791323dabfa9dbe65cf13b875490e4dfbdda02c2b6d3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7786f659dd3c2de0aab75e0c29a8044_JaffaCakes118

Files

e7786f659dd3c2de0aab75e0c29a8044_JaffaCakes118
.exe windows:4 windows x86 arch:x86

80727da4fcab636f2eab42769fa54098

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleW
EnumTimeFormatsA
GetComputerNameA

user32

DdeInitializeA
CreateWindowExA
CreateMDIWindowA

gdi32

DeviceCapabilitiesExA
GetCharWidth32A

Sections

.rdata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icode
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 512B - Virtual size: 354B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ